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EXAMINER'S AMENDMENT 
1 . An examiner's amendment to the record appears below. Should the changes and/or 
additions be unacceptable to applicant, an amendment may be filed as provided by 37 CFR 
1 .3 12. To ensure consideration of such an amendment, it MUST be submitted no later than the 
payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview with 
Kevin J. Zilka (Reg. No. 41429) on 5/9/2006. 

The appUcation has been amended as follows: 

1. (Currently Amended) A method for analyzing a network utiUzing a zone controller, 
comprising: 

(a) receiving network traffic information from a plurality of host controllers; [and] 

(b) reporting on the network traffic information utilizing a plurality of network- 
based interfaces; [and] 

(c) wherein the host controllers are related to a zone; 

(d) generating ^vher e i j a map of a network jio p e n e rat e ^ based on the network trafRc- 
information; and 

(e) providing ^h e r e i^ intrusion detection servi(res( ar e provide j based on network traffic 
information . 

9. (Currently Amended) A computer program product for analyzing a network utilizing a 
zone controller, comprising: 

(a) computer code for receiving network traffic information from a plurality of host 
controllers; [and] 
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(b) coiTq)uter code for rq)orting on the network traffic information utilizing a plurality of 
network-based interfaces; [and] 

(c) wherein the host controllers are related to a zone; 

(d) generating ^h e r e i^ a map of a network ^s^ e nerat edjbased on the network traffic- 
information; and 

(e) providing ^h e r e i^ intrusion detection services ^ e- provid edlbased on network traffic 
information . 

17, (Currently Amended) A system for analyzing a network utiUzing a zone controller, 
comprising: 

(a) logic for receiving network traffic information from a plurality of host 
controllers; [and] 

(b) logic for reporting on the network traffic information utilizing a plurality of 
network-based interfaces; [and] 

(c) wherein the host controllers are related to a zone; 

(d) generating ^h e r e i j a map of a network^G f i e n e rat e d jbased on the network traffic- 
information; and 

(e) providing ^h e r e ij intrusion detection services provid e d jbased on network traffic 
information. 



25. (Currently Amended) A system for analyzing a network utilizing a zone controller, 
comprising: 

(a) means for receiving network traffic information from a pluraUty of host 
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controllers; [and] 

(b) means for reporting on the network traffic information utilizing a plurality of 
network-based interfaces; [and] 

(c) wherein the host controllers are related to a zone; 

(d) generating ^h e rein [a map of a network ^ ^n e rat e ^ based on the network traffic- 
information; and 

(e) providing ^h e r e iij intrusion detection services provid e ^ based on network traffic 
information. 



26. (Currently Amended) A method for analyzing a network utilizing a zone controller, 
con5)rising: 

(a) synchronizing a clock with a plurality of host controllers; 

(b) receiving network traffic information from the host controllers; 
identifying a zone associated with each of the host controllers; 

(d) receiving maps from the host controllers; 

(e) reporting on the network traffic information relating to each of the zones 
utilizing a plurality of network-based interfaces and the maps; [and] 

(f) offloading the network traffic information to a database; 

(g) generating ^h e r e ij a map of a network ^^ e nerate^ based on the network traffic- 
information: and 

(h) providing ^h e r e ij intrusion detection services ^e^rovid e d |based on network traffic 
information. 
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2. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to PHUC H. TRAN whose telephone number is (571) 272-3172. 
The examiner can normally be reached on M-F (8-4:30). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, CHI PHAM can be reached on (571) 272-3179. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published appUcations 
may be obtained from either Private PAIR or PubUc PAIR. Status information for unpublished 
appUcations is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 

Phuc Tran 
Assistant Examiner 
Art Unit 2664 
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